Behavioral task
behavioral1
Sample
3b2884e6123c0281e6e07895e096ce350cbd8ef85028bd3105a67721248dce29.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3b2884e6123c0281e6e07895e096ce350cbd8ef85028bd3105a67721248dce29.exe
Resource
win10v2004-20220812-en
General
-
Target
3b2884e6123c0281e6e07895e096ce350cbd8ef85028bd3105a67721248dce29
-
Size
22KB
-
MD5
8774dfe7cbbd31f5d87d2c17747291d1
-
SHA1
2c9d5e2bda82da31ceafbf7ec51a68f287f7506b
-
SHA256
3b2884e6123c0281e6e07895e096ce350cbd8ef85028bd3105a67721248dce29
-
SHA512
979f8f87a999d54521e6a4094dae6e8fea7340e75060b1885e73fa543047508c6062c7e866c04fc001f7b0833d479f0dd10b5618d36cb498dfdb7e6b0c92f01c
-
SSDEEP
384:2zerxMCQmreJsg/5ZuSppqwpng6tgL29LCBPZVmRvR6JZlbw8hqIusZzZyCb7b71:Rxq71jBLbRpcnuwb7b7b5
Malware Config
Extracted
njrat
0.7d
هكراااااااااات2
xx999.zapto.org:88
e9a63701fe177be73c02f93878efa519
-
reg_key
e9a63701fe177be73c02f93878efa519
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
3b2884e6123c0281e6e07895e096ce350cbd8ef85028bd3105a67721248dce29.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ